TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.28K subscribers
Post #1574 100
🤖 Hacking OpenAI

Researchers chained a libheif heap buffer overflow (via Discourse/ImageMagick image upload) with an OpenAI SSO misconfiguration to achieve RCE on community.openai.com, take over employee ChatGPT/Codex accounts, and access OpenAI's internal GitHub monorepo.

https://www.hacktron.ai/blog/hacking-openai

#AI
  • ❤ 1
  • 👍 1
  • 🔥 1
Open in Telegram All posts from @cloud_sec
More from @cloud_sec
  1. Sep 29, 2026👩‍💻 How to secure edge AI in customer-owned environments Edge AI shifts trust responsibi…
  2. Sep 28, 2026🤖 Containers Are No Longer a Security Boundary AI-accelerated kernel vuln discovery (5,97…
  3. Sep 25, 2026🔶 Introducing Amazon EBS Volume Clones across AWS account AWS introduces Amazon EBS Volum…
  4. Sep 24, 2026🤖 DeepSeek Harness Vulnerability. Lets AI Agents Escape Their Own Sandbox CVE-2026-82533…
  5. Sep 23, 2026🤖 Hacking AI customer service agents Techniques for attacking AI customer service agents:…
  6. Sep 22, 2026🤖 OpenAI's Defense Factory OpenAI's Defense Factory is a continuous, agent-first vulnerab…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →